Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8abc1694-b93c-35df-9193-df304492f416.roa
File:                     8abc1694-b93c-35df-9193-df304492f416.roa (raw, json)
Hash identifier:          VcITsGGNJW0eA/5UddUlYDSNaNiISy7oBLZKa2aJ/R0=
Subject key identifier:   C4:81:92:2B:05:77:E1:8D:92:49:A9:FF:64:81:D6:D1:7B:8F:71:19
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848A400E495855BB13A40F77D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8abc1694-b93c-35df-9193-df304492f416.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        2600:1009:b1c8::/45 maxlen: 45
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:e4:95:85:5b:b1:3a:40:f7:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=663075ed-2f79-48f5-86ad-fd9af80cc3d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:df:fb:1e:a6:79:37:d9:73:d2:03:9b:4b:0d:
                    e4:cf:a6:ce:e8:22:5d:f1:21:f6:db:07:76:43:d4:
                    82:48:4c:40:49:35:ab:a3:f7:df:0b:b9:e7:4a:5f:
                    9f:11:6d:23:ba:08:9e:b1:06:da:f9:19:18:f6:5a:
                    aa:2c:c3:62:81:be:9d:3d:6f:eb:3f:6e:2d:24:72:
                    85:b1:03:19:7b:c4:3e:29:53:5b:66:f0:61:41:7f:
                    2f:56:2c:4d:47:24:7d:d0:42:f3:06:07:d9:1a:13:
                    1b:c5:45:f0:12:6f:b6:03:02:14:32:ad:a3:1e:ff:
                    73:8f:52:2c:dd:f6:4f:17:ef:33:db:6d:76:4b:08:
                    6e:95:72:73:f3:9a:24:b8:c9:61:56:c4:84:fb:6a:
                    e8:bd:58:b1:66:70:70:fb:3f:91:d7:c8:ab:93:50:
                    83:ca:ac:a0:bb:41:74:69:2a:d1:35:96:a5:28:c8:
                    23:59:80:b6:8b:aa:47:2e:45:7d:5d:73:96:c2:84:
                    e0:c7:2e:c9:4c:34:db:c0:94:71:11:99:ba:d6:16:
                    c8:ae:12:56:b4:74:97:e3:0b:8d:c9:f9:33:77:78:
                    b4:81:ef:08:2a:d7:2b:3d:c5:68:fa:01:97:6a:32:
                    2b:c7:18:8b:e4:18:6a:eb:ad:94:92:61:05:4b:d6:
                    c4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:81:92:2B:05:77:E1:8D:92:49:A9:FF:64:81:D6:D1:7B:8F:71:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8abc1694-b93c-35df-9193-df304492f416.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:b1c8::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:bd:83:bb:c3:d8:9d:5d:b3:14:13:07:3f:eb:90:1f:50:22:
         2e:4a:55:1d:7f:26:70:9e:f7:c8:3d:97:70:fc:9a:38:fa:fe:
         35:ad:81:a2:3d:01:58:8c:31:d1:b2:4a:3d:95:32:f5:32:33:
         7d:bd:82:13:fa:73:f9:e9:b5:af:e5:2b:6d:fc:d6:c4:ae:e8:
         a6:a9:a9:61:85:b1:e0:8f:dd:42:ad:44:18:dc:a0:a7:ee:fb:
         c5:60:81:26:57:60:c5:44:a9:9b:d1:88:75:a5:50:c5:0e:3b:
         d9:31:f1:e2:b2:cf:1a:10:4e:14:f7:34:9a:f2:8d:c0:93:a3:
         6b:e5:ba:91:c8:a0:a0:14:87:d3:e4:03:22:5c:bf:ac:40:c1:
         3d:02:46:28:84:8a:6d:26:55:02:14:9a:de:5a:75:71:e9:bd:
         45:1f:42:95:dd:59:14:bd:ea:d8:4d:a9:37:db:93:2e:8a:ba:
         68:67:cf:97:2f:0a:ac:e4:48:3f:31:7f:b8:07:9e:9e:fe:45:
         45:fe:ce:81:95:33:bf:1f:07:d8:77:53:08:6d:f4:28:54:04:
         e0:aa:e3:ad:69:e4:9d:29:41:e1:48:fe:2b:65:88:d7:1b:f2:
         ed:9c:ca:2d:52:cf:4b:7e:a0:5a:1a:94:b4:07:65:4d:0b:84:
         2e:48:7a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----